evolinux-users: Update sudoers template to remove commands allowed without password

2 months ago · 49e92d20b0
parent 3f0eecc056
commit 49e92d20b0
3 changed files with 3 additions and 2 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -25,6 +25,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * nagios-nrpe : Rewrite check_vrrpd for a better check (check rp_filter, vrrpd and uvrrpd compatible, use arguments, …)
 * postfix: come back to default value of `notify_classes` for pack mails.
 * openvpn: Change check_openvpn destination file to comply with recent EvoBSD change
+* evolinux-users: Update sudoers template to remove commands allowed without password

 ### Fixed

--- a/evolinux-users/templates/sudoers_jessie.j2
+++ b/evolinux-users/templates/sudoers_jessie.j2
@ -1,6 +1,6 @@
 Defaults        umask=0077

-Cmnd_Alias      MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh, /usr/bin/apt, /bin/mount
+Cmnd_Alias      MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh
 User_Alias      ADMINS = {{ user.name }}

 nagios          ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs
--- a/evolinux-users/templates/sudoers_stretch.j2
+++ b/evolinux-users/templates/sudoers_stretch.j2
@ -1,6 +1,6 @@
 Defaults        umask=0077

-Cmnd_Alias      MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh, /usr/bin/apt, /bin/mount
+Cmnd_Alias      MAINT = /usr/share/scripts/evomaintenance.sh, /usr/share/scripts/listupgrade.sh

 nagios          ALL = NOPASSWD: /usr/lib/nagios/plugins/check_procs
 nagios          ALL = NOPASSWD: /usr/local/lib/nagios/plugins/check_minifirewall